CVE-2008-5092: Novell Edirectory

High severity, CVSS 10.0. EPSS: 1.7% chance of exploitation in the next 30 days.

Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) before 8.8 SP3 have unknown impact and attack vectors related to the (1) HTTP language header and (2) HTTP content-length header.

Affected products

• Novell Edirectory: up to and including 8.8; version 8.0 only; version 8.5 only; version 8.5.12a only; version 8.5.27 only; version 8.6.2 only; …

Published 2008-11-14. Last modified 2026-06-16.